China Security Report — March 22, 2026

Security analysis based on open-source intelligence and web research. Period: March 15 — March 22, 2026.

Executive Summary

During the period of March 15-22, 2026, China demonstrated a continued assertive posture in its security and defense policies, marked by a significant increase in its defense budget and intensified rhetoric towards Taiwan. While military activity around Taiwan showed a fluctuating pattern, a notable spike in air and naval presence was observed on March 15. Concurrently, diplomatic relations with the United States remained complex, with a planned presidential summit delayed amidst ongoing trade disputes and regional conflicts. A pervasive threat from China-linked cyber espionage groups targeting global telecommunications and government agencies underscored a persistent and sophisticated cyber threat landscape. Domestically, the "Two Sessions" legislative meetings solidified China's strategic focus on technological self-reliance and military modernization, reinforcing a long-term trajectory towards enhanced national security capabilities.

Key Security Developments

• Defense Budget Increase
  China announced a 7% increase in its 2026 defense budget during the annual "Two Sessions" legislative meetings, bringing the total military expenditure to approximately $277 billion to $281 billion. This marks the 11th consecutive year of single-digit growth, significantly exceeding the country's economic growth target of 4.5% to 5%. The increase underscores Beijing's unwavering commitment to military modernization and technological competition, even amidst domestic fiscal pressures.

• PLA Leadership Purge
  The announcement of the increased defense budget coincided with an extensive purge of senior People's Liberation Army (PLA) generals, with over 100 senior PLA leaders purged since 2022. This campaign, which has included investigations into top generals like Zhang Youxia and Liu Zhenli, is widely interpreted as an effort by President Xi Jinping to centralize his authority and prevent the emergence of powerful factions that could challenge his leadership.

• Taiwan Strait Military Activity
  Following a period of significantly reduced activity during the "Two Sessions" (March 4-12), the PLA Air Force (PLAAF) resumed operations around Taiwan. On March 15, Taiwan's Defense Ministry reported a notable increase, detecting 26 Chinese military aircraft and seven naval vessels operating near the island, with 16 aircraft crossing the median line of the Taiwan Strait. This surge followed 17 days between February 15 and March 15 with no PLAAF activity near Taiwan, suggesting a potential shift in China's military coercion strategies.

• Bellicose Rhetoric Towards Taiwan
  China's 2026 government work report adopted more aggressive language regarding Taiwan, changing the phrase "oppose Taiwan independence" to "crack down on Taiwan independence." This combative phrasing reflects China's expanding coercive efforts against Taiwan, particularly following the election of "separatist" Taiwanese President William Lai Ching-te. Taiwan's Defense Minister Wellington Koo stated on March 20 that China's unabated military build-up poses a pressing threat, necessitating effective deterrence.

• US-China Diplomatic and Trade Relations
  US President Donald Trump announced on March 17 that he would delay his planned summit with CCP General Secretary Xi Jinping by "five or six weeks" to prioritize the conflict in Iran. Prior to this, US Treasury Secretary Scott Bessent met with PRC Vice Premier He Lifeng on March 15-16 to discuss bilateral trade issues, including the prospect of a "Board of Trade." Both sides reported productive talks, despite ongoing US Section 301 investigations into unfair trade practices, which China has rejected.

• Pervasive Cybersecurity Threats
  China-linked hacking groups continued to pose significant global cybersecurity threats. The "Salt Typhoon" campaign has targeted over 200 companies worldwide, including major US telecom providers (AT&T, Verizon, CenturyLink, Viasat) and a US state National Guard network. This operation aims to prepare China for potential military action against Taiwan by accessing sensitive communications. Separately, Google's Threat Intelligence Group and Mandiant reported that the China-linked group UNC2814 breached over 50 telecommunications companies and government agencies in 42 countries, utilizing malware hidden in Google Sheets to mask malicious traffic.

• New Cybercrime Legislation
  On March 17, Human Rights Watch reported on China's proposed cybercrime law, which extends far beyond legitimate concerns to include sweeping provisions that threaten internationally protected rights to privacy, freedom of expression, and access to information. The law features vague offenses, stricter real-name rules, and an abusive extraterritorial reach, applying to overseas individuals and organizations providing internet services to users in the PRC.

• Technological Self-Reliance and 15th Five-Year Plan
  The "Two Sessions" (March 4-12) highlighted China's strategic focus on technological self-reliance, with the 15th Five-Year Plan (2026-2030) emphasizing indigenous innovation in semiconductors, artificial intelligence (AI), quantum computing, and space exploration. The plan promotes an "AI Plus Initiative" aimed at industrial transformation, military modernization, and social governance, backed by significant national-level resource mobilization for research and development.

• China-Vietnam Border Defense Exchange
  Chinese Defense Minister Dong Jun and his Vietnamese counterpart, Phan Van Giang, attended the 10th Border Defense Friendship Exchange from March 20-21. The event included visits to border defense units, planting friendship trees, and a China-Vietnam joint naval patrol and training exercise in the Beibu Gulf. This exchange signals efforts to deepen practical military ties and maintain close strategic communication between the two nations.

• US Intelligence Assessment on Taiwan Invasion
  The US intelligence community's annual threat assessment, released on March 18, stated that China has no specific plan to invade Taiwan by 2027 and has set no definitive timeline for such an operation. However, the report emphasized that Beijing has never abandoned its goal of absorbing Taiwan and continues to build its capacity for operations against the island, aiming to control it without the use of force.

Geopolitical Impact and Regional Dynamics

The period from March 15-22, 2026, saw China continue to navigate a complex geopolitical landscape, with its actions significantly influencing regional stability and relations with major powers. The delay in the US President Trump-Xi Jinping summit, attributed to the conflict in Iran, underscores the persistent volatility in US-China relations. While economic talks between US and Chinese officials occurred, the broader relationship remains characterized by strategic competition, with US experts largely viewing China as a "strategic competitor" or even an "adversary." This dynamic is further complicated by ongoing US trade investigations and China's rejection of these measures, indicating a continued trade dispute that impacts global economic stability.

Tensions in the Taiwan Strait remain a critical concern, with China's increased defense budget and more aggressive rhetoric towards Taiwan maintaining a high level of regional instability. Despite a US intelligence assessment suggesting no imminent invasion plan by 2027, China's ongoing military build-up and fluctuating but significant military activities around the island contribute to an elevated risk of miscalculation or accidental escalation. China's diplomatic efforts to sway Taiwan's remaining allies, such as Paraguay, further illustrate its strategy to isolate Taiwan internationally, impacting the broader Indo-Pacific security architecture.

Beyond the immediate flashpoints, China's strategic emphasis on technological self-reliance, as outlined in its 15th Five-Year Plan, signals a long-term ambition to achieve dominance in critical technological domains. This pursuit has significant implications for global supply chains and technological competition, particularly with the US and its allies. The joint naval patrol and border defense exchange with Vietnam, despite historical tensions and ongoing South China Sea disputes, suggests China's pragmatic approach to managing relations with some Southeast Asian neighbors, aiming to foster cooperation while asserting its regional influence. The widespread Chinese state-sponsored cyber espionage campaigns targeting global telecommunications and government agencies represent a pervasive and sophisticated threat to international security and critical infrastructure, highlighting a significant dimension of China's geopolitical influence.

Military and Defense Analysis

China's military and defense posture during this period was characterized by sustained modernization efforts and a clear strategic direction, as evidenced by the 7% increase in its 2026 defense budget to approximately $277-281 billion. This consistent growth, marking the 11th consecutive year of single-digit increases, underscores Beijing's unwavering commitment to transforming the People's Liberation Army (PLA) into a "world-class military" by its centenary in 2027. The allocation of these funds is directed towards advancing the integrated development of mechanization, informationization, and intelligentization, optimizing joint operations systems, and promoting the development of new-domain and new-quality combat forces. This includes substantial investments in advanced missile systems, naval expansion, stealth aircraft, sophisticated cyber capabilities, and space-based military assets, all crucial for projecting power beyond its immediate region.

Despite domestic economic slowdowns, defense spending remains largely insulated from fiscal pressures, highlighting the strategic priority Beijing places on national security and technological competition. Analysts consistently suggest that China's actual military expenditures are substantially higher than the officially declared figures, with some estimates indicating they could be 32-63% greater. This discrepancy suggests a broader, less transparent investment in military capabilities. The 15th Five-Year Plan further solidifies this trajectory by prioritizing indigenous innovation in cutting-edge technologies like artificial intelligence, quantum computing, and advanced computing, which are seen as pivotal for transforming the nature of future warfare.

The PLA's force posture around Taiwan, while showing a period of reduced activity during the "Two Sessions," quickly resumed with a notable spike on March 15, including significant aerial and naval presence. These activities, including incursions across the Taiwan Strait's median line, are part of ongoing efforts to erode Taiwan's threat awareness and signal displeasure with its government's actions. The development of advanced naval assets, such as the Type 055 destroyers, is enhancing the Eastern Theater Command's (ETC) air defense capabilities against anti-ship missiles and enemy aircraft during potential amphibious operations, and providing precision-strike vectors with land-attack cruise missiles. The ongoing purge of senior PLA leadership, while potentially disruptive in the short term, is ultimately aimed at centralizing President Xi Jinping's control over the military, ensuring its loyalty and effectiveness in achieving national strategic objectives.

Outlook and Forecast

In the short term (1-3 months), US-China relations are likely to remain characterized by a delicate balance of competition and cautious engagement. The delayed Trump-Xi summit, while a setback for immediate high-level dialogue, suggests both sides are willing to manage the relationship amidst other global crises, particularly the conflict in Iran. However, underlying trade disputes and technological rivalry will persist, with the US continuing its Section 301 investigations and China maintaining its rejection of such measures. Military pressure on Taiwan is expected to continue, though the observed fluctuations in PLAAF activity suggest China may be refining its coercive tactics, potentially shifting from constant high-volume incursions to more targeted or sophisticated "gray zone" operations. Cybersecurity threats from China-linked state-sponsored groups will remain a critical concern, with ongoing campaigns targeting global critical infrastructure and government entities.

Critical flashpoints and risk areas continue to center on the Taiwan Strait and the South China Sea. The Taiwan Strait remains the most significant flashpoint, with a high risk of military escalation, whether intentional or accidental, given China's assertive rhetoric and sustained military build-up. The South China Sea also presents an elevated risk due to ongoing territorial disputes and increased naval presence by various claimants. Beyond these geographic areas, the intensifying technological competition, particularly in semiconductors and artificial intelligence, represents a strategic flashpoint that could lead to further economic decoupling and heightened tensions.

Key indicators to monitor in the coming months include any rescheduled dates and outcomes of the Trump-Xi summit, which could signal shifts in the broader bilateral relationship. The nature and intensity of PLA military activities around Taiwan, including naval movements and drone operations, will be crucial for assessing China's evolving coercive strategies. Further, monitoring Taiwan's legislative progress on its defense budget and military modernization programs will provide insight into its resilience. On the cybersecurity front, new reports of China-linked hacking campaigns or the implementation details of China's new cybercrime law will indicate the trajectory of its cyber capabilities and regulatory environment. Finally, progress on China's 15th Five-Year Plan's goals for technological self-reliance, especially in critical sectors, will reveal the pace and scope of its long-term strategic ambitions.

Strategic recommendations for stakeholders include maintaining robust deterrence capabilities and enhancing intelligence sharing among allies to effectively counter China's evolving military and "gray zone" tactics in the Indo-Pacific. International partners should prioritize strengthening cybersecurity defenses and fostering collaborative threat intelligence efforts to mitigate the pervasive and sophisticated Chinese state-sponsored hacking campaigns. For the United States, continued diplomatic engagement with China is essential to manage competition, prevent miscalculation, and explore areas of limited cooperation, while simultaneously reinforcing alliances and partnerships in the region. Businesses, particularly those in critical technology sectors, should conduct thorough assessments of their supply chain vulnerabilities and diversify sourcing to mitigate risks associated with China's aggressive push for technological self-reliance.

Sources

• understandingwar.org
• visiontimes.com
• thedefensewatch.com
• globaltimes.cn
• defensenews.com
• securityonscreen.com
• understandingwar.org
• youtube.com
• straitstimes.com
• china-briefing.com
• the420.in
• cybersecuritydive.com
• hrw.org
• aspistrategist.org.au
• apcoworldwide.com
• nylim.com
• majalla.com
• cgtn.com
• visiontimes.com
• csis.org
• warontherocks.com